CVE-2020-12503: Korenix Jetnet 4510 Firmware

High severity, CVSS 7.2. EPSS: 22.8% chance of exploitation in the next 30 days.

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.

Affected products

• Korenix Jetnet 4510 Firmware: affected versions not specified
• Korenix Jetnet 4706 Firmware: affected versions not specified
• Korenix Jetnet 4706f Firmware: affected versions not specified
• Korenix Jetnet 5010 Firmware: affected versions not specified
• Korenix Jetnet 5310 Firmware: affected versions not specified
• Korenix Jetnet 5428g-20sfp Firmware: affected versions not specified
• Korenix Jetnet 5810g Firmware: affected versions not specified
• Korenix Jetnet 6095 Firmware: affected versions not specified
• Korenix Jetwave 2212g Firmware: affected versions not specified
• Korenix Jetwave 2212s Firmware: affected versions not specified
• Korenix Jetwave 2212x Firmware: affected versions not specified
• Korenix Jetwave 2311 Firmware: affected versions not specified
• Korenix Jetwave 3220 Firmware: affected versions not specified
• Pepperl-Fuchs ES7506 Firmware: any version
• Pepperl-Fuchs ES7510-Xt Firmware: any version
• Pepperl-Fuchs ES7510 Firmware: any version
• Pepperl-Fuchs ES7528 Firmware: any version
• Pepperl-Fuchs ES8508 Firmware: any version
• Pepperl-Fuchs ES8508F Firmware: any version
• Pepperl-Fuchs ES8509-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xt Firmware: any version
• Pepperl-Fuchs ES8510-Xte Firmware: any version
• Pepperl-Fuchs ES8510 Firmware: any version
• Pepperl-Fuchs ES9528-Xt Firmware: any version
• Pepperl-Fuchs ES9528-XTV2 Firmware: any version
• and 3 more

Published 2020-10-15. Last modified 2026-06-17.